Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8dbfbde7-4f86-4b7a-a90c-d0d37df2f328.roa
File:                     8dbfbde7-4f86-4b7a-a90c-d0d37df2f328.roa (raw, json)
Hash identifier:          1NUjXq9aGUqKYCZGZrKUEL5ymlZkesKh5oJIKSG2R8Q=
Subject key identifier:   E2:26:29:A4:51:09:2B:5F:06:9D:25:60:34:DB:03:B9:E0:AF:8F:97
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2BCB21F7C2BD14129B29A32C378ED8316424B493
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8dbfbde7-4f86-4b7a-a90c-d0d37df2f328.roa
Signing time:             Fri 31 Oct 2025 03:28:14 +0000
ROA not before:           Fri 31 Oct 2025 03:28:14 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2af0::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:cb:21:f7:c2:bd:14:12:9b:29:a3:2c:37:8e:d8:31:64:24:b4:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 03:28:14 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=a4e9fd3341a9b78fae7e44a15e1fdde5b8a14391688871542a9600f840118a5b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:00:b2:ad:8f:f1:ba:8a:73:34:c9:a6:49:86:
                    5e:5d:0f:cd:50:72:01:b3:45:b6:5c:81:3e:0c:9d:
                    eb:49:38:a5:df:10:6c:54:cb:a2:71:20:fd:b1:ab:
                    cf:ea:bb:1c:5f:a0:f4:45:14:19:07:9e:c8:38:ba:
                    3e:c4:54:c8:f1:d3:cd:a7:47:a8:c1:de:55:52:ab:
                    12:e9:f3:5c:d1:ae:18:6e:91:ff:6f:87:82:36:a5:
                    bf:42:19:bc:65:8a:f6:c9:fe:78:c2:3c:21:13:8a:
                    db:a9:42:13:a4:59:a3:8f:b4:5a:79:78:08:4e:83:
                    21:95:b9:d0:74:98:c8:18:57:3d:20:e9:e9:8b:09:
                    7d:89:ba:a8:8a:57:2e:8d:4e:cc:3a:00:8c:c6:a9:
                    6a:e8:f6:23:af:dd:1d:2b:4f:12:9f:a9:b0:75:6e:
                    ca:62:75:b5:fc:69:ee:02:ec:b0:9b:1b:c0:76:aa:
                    8a:83:1f:63:4d:f1:76:1e:1b:67:25:eb:0c:68:77:
                    49:47:bc:5a:f5:ec:bd:d3:2d:b6:66:2d:73:73:0b:
                    8e:77:e9:0e:48:94:8f:76:94:e2:f6:07:0b:89:ff:
                    8f:89:5c:70:5a:20:4b:9d:40:2c:30:63:89:c4:f8:
                    13:d6:3a:75:55:e8:73:5d:d8:61:27:5b:c3:60:42:
                    d1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:26:29:A4:51:09:2B:5F:06:9D:25:60:34:DB:03:B9:E0:AF:8F:97
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8dbfbde7-4f86-4b7a-a90c-d0d37df2f328.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2af0::/46

    Signature Algorithm: sha256WithRSAEncryption
         b0:20:13:66:12:d2:4b:4a:1f:e3:36:1b:f5:38:0e:f7:85:23:
         e5:f3:b4:73:dc:c9:7c:ee:49:80:86:91:7a:86:12:86:cb:66:
         70:fc:b2:cd:f0:0a:20:3f:4f:1b:ff:1b:3a:fe:2b:0b:82:ab:
         e3:78:fb:21:7d:8a:39:bd:73:03:90:b2:e2:a6:92:ab:3e:0c:
         f0:35:e5:ae:8a:0b:1e:20:ce:07:10:de:e4:49:50:e4:25:3d:
         a2:1a:4b:19:b7:81:00:dd:45:96:d4:80:c7:a9:57:38:c8:dd:
         51:b2:01:f4:6c:be:a8:d5:89:ff:b2:da:06:34:a3:28:93:99:
         b0:47:0d:e6:e4:30:0a:fc:4f:dd:30:4c:7d:e5:63:85:c5:03:
         96:d9:ec:d0:4d:b9:58:6b:b5:3f:5c:bd:09:8a:db:7c:86:b2:
         33:f6:4d:35:bd:5a:5f:36:4d:40:21:88:82:c5:bd:c1:b5:e6:
         ef:4e:5b:6d:64:06:d8:85:3d:23:15:ee:51:90:68:eb:04:83:
         1b:0b:04:b8:64:b6:82:2b:69:12:bd:c7:27:31:c3:0b:23:2d:
         0f:2c:33:75:31:e0:25:2a:40:3b:24:ab:7b:2d:6c:a8:3b:14:
         bc:79:a0:96:e5:6b:b9:e8:9e:ac:6f:ec:ac:28:1e:9c:48:e4:
         bf:3c:3a:e3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:43:47 2025 by rpki-client